Ticket 362 - Directory Console generates insufficient key strength
The security CGI that is called by the Console is limited terms of
key generation and the signing algorithm used for the request. The
RSA key size is limited to 1024 bit or less, and the signing algorithm
is hardcoded to MD5.
This patch increases the maximum RSA key size to 4096 and uses a
default of 2048 if the caller doesn't specify a key size. The default
signing algorithm is changed to SHA-1, and a new CGI parameter has been
added to allow the caller to alternatively choose SHA-256, SHA-384, or
SHA-512.